From 30366ac7fc9ecc9d59d96606396ec18943f3d00d Mon Sep 17 00:00:00 2001
From: Patrik Korytar <patrik.korytar@gmail.com>
Date: Thu, 10 Sep 2026 17:48:38 +0200
Subject: [PATCH 1/2] NCL-9918 Bump netty-bom to v4.1.138.Final

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index f799792..3344865 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,7 +65,7 @@
             <dependency>
                 <groupId>io.netty</groupId>
                 <artifactId>netty-bom</artifactId>
-                <version>4.1.118.Final</version>
+                <version>4.1.138.Final</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

From 187779ae68f15e1fed16d28a0acd6adf802d65b5 Mon Sep 17 00:00:00 2001
From: Patrik Korytar <patrik.korytar@gmail.com>
Date: Fri, 11 Sep 2026 12:51:46 +0200
Subject: [PATCH 2/2] Exclude netty >= 4.2 updates from dependabot

---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0acc664..236d23a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,6 +18,10 @@ updates:
         - "org.jboss.da:*"
         - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
         - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz
+    ignore:
+      # stay on the netty 4.1.x line
+      - dependency-name: "io.netty:*"
+        versions: [">= 4.2.0"]
   - package-ecosystem: "github-actions" # Also update Github actions
     directory: "/"
     schedule: